WSO2 Changelog

We are introducing graceful refresh token rotation, allowing old refresh tokens to remain valid for a configurable grace period after rotation, on a per-application basis. This gives client applications a buffer window to complete in-flight requests using the previous refresh token before it's invalidated, reducing failures caused by race conditions during token rotation.

Documentation: 

https://wso2.com/identity-platform/docs/references/tokens/refresh-tokens/

https://wso2.com/identity-platform/docs/references/app-settings/oidc-settings-for-app/#graceful-refresh-token-rotation